It's not that horrendous but only because I created a really similar setup by converting a Wordpress site into a static site generated by Pelican and everything is deployed by ./satan.sh after work with markdown is done. Oh and there is a bastion host that is taken into account by moving a tar-ball around till it's at its destination ready to be extracted for the nginx root.